This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft File: 1eglbE9iHYxMFwZl6HjqiOy7P1E.mft (raw, json) Hash identifier: jmNcaf/JUP7qtKnbsvF0eihxRPkNITtZ6BOs9VQZyYI= Subject key identifier: 9C:FE:C7:19:9D:63:58:A9:BF:82:BF:A1:DE:BD:E4:1B:18:F1:47:5A Authority key identifier: D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51 Certificate issuer: /CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51 Certificate serial: 019B3FECE200622D27E6B8AB9BF8B33358A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 08:00:47 +0000 Manifest this update: Sun 21 Dec 2025 08:00:47 +0000 Manifest next update: Mon 22 Dec 2025 08:00:47 +0000 Files and hashes: 1: 1eglbE9iHYxMFwZl6HjqiOy7P1E.crl (hash: tKLTFHeoxgyZ2Au/moPGHOZiWRyrUbPPrh0Ufiwuhj4=) 2: s19cTegZPcgfvMn79U7vcydThPE.roa (hash: V3xH7pf/IllOyz6AG2kCqa1+TkH2gfpLo44RkSGpMGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:e2:00:62:2d:27:e6:b8:ab:9b:f8:b3:33:58:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51 Validity Not Before: Dec 21 08:00:47 2025 GMT Not After : Dec 22 08:00:47 2025 GMT Subject: CN=9cfec7199d6358a9bf82bfa1debde41b18f1475a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:58:0e:34:f6:cf:38:b7:45:2d:0d:66:ae:2b: ad:83:f8:83:aa:c2:da:b3:cb:1e:c9:62:c4:22:64: b5:c5:ec:30:e6:a2:7c:7f:22:13:e6:81:2f:08:9e: b5:fa:50:64:f0:38:91:c5:77:4a:dc:20:b5:ea:e6: 3e:f4:7b:48:87:03:b3:33:8e:00:56:b1:76:16:11: 7d:2a:1b:cc:83:81:42:59:0c:6c:20:76:e5:41:75: fa:43:a5:25:d1:5c:83:ba:c4:40:b1:a9:0b:b5:cf: 38:70:3d:80:69:5a:36:77:1b:db:13:57:32:ac:c8: 72:87:3a:15:8d:2e:5f:48:bb:89:e3:ca:78:37:3f: c4:b7:20:b9:b9:60:2b:14:59:df:1d:9e:f4:fc:ad: c9:40:66:64:66:e4:07:dd:9d:71:4b:58:64:b3:f0: 63:f1:25:f1:fd:8a:75:4d:a1:b1:54:c0:de:e2:1c: 8d:34:26:00:f5:e1:9c:d5:54:65:1a:e0:11:ef:cd: 90:e2:cb:54:2b:54:c1:31:a7:34:5c:c0:93:45:0c: 99:75:ef:ff:1d:05:63:62:2b:f6:c1:5b:3b:37:4d: 43:29:2c:63:f6:48:ea:6b:ce:24:70:6c:c7:91:fe: cc:62:25:85:9a:81:39:d9:44:c8:9b:4d:a5:25:81: c7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FE:C7:19:9D:63:58:A9:BF:82:BF:A1:DE:BD:E4:1B:18:F1:47:5A X509v3 Authority Key Identifier: keyid:D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:74:36:65:bd:22:e3:3f:6d:7f:79:24:64:89:88:05:3e:2d: 82:03:fb:90:3d:c1:8e:57:8d:07:12:d9:e9:18:bc:35:bd:5d: 1a:91:2b:41:78:81:19:5e:aa:7a:b2:7e:8f:27:21:1b:42:5d: fd:65:0a:78:fe:de:26:59:96:72:a7:34:70:c0:62:83:81:31: cf:c6:b2:e7:b9:73:11:5f:89:7b:98:35:50:bf:73:3f:47:70: 5a:ce:41:9e:57:ed:f7:38:87:35:7d:91:6c:1f:12:54:eb:9f: 7f:8f:ad:2c:01:6e:51:02:3f:c6:81:48:57:d5:ba:e0:c9:35: 14:d1:1b:a8:2e:1a:2c:6b:a3:a1:20:b1:bc:a6:ac:37:fe:eb: d8:ac:92:c1:d6:6a:1d:67:16:0c:4b:6c:af:04:34:ae:c4:4e: f4:66:38:81:a6:b4:9d:a3:64:18:23:5a:65:cc:19:05:61:3f: e9:fc:94:45:25:96:08:99:3f:b6:17:2c:a9:65:66:77:4b:3d: 92:51:73:01:df:71:ea:04:de:a6:b5:4c:ba:25:7b:42:6b:b1: 5c:58:48:1b:ab:9e:e7:f6:41:67:de:b6:63:4b:3f:14:47:35: 6c:a9:ff:a9:fa:06:a7:56:99:27:5e:a0:a3:ae:c4:c3:4f:ef: fd:b8:0d:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7OIAYi0n5rirm/izM1inMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZTgyNTZjNGY2MjFkOGM0YzE3MDY2NWU4NzhlYTg4ZWNi YjNmNTEwHhcNMjUxMjIxMDgwMDQ3WhcNMjUxMjIyMDgwMDQ3WjAzMTEwLwYDVQQD Eyg5Y2ZlYzcxOTlkNjM1OGE5YmY4MmJmYTFkZWJkZTQxYjE4ZjE0NzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1gONPbPOLdFLQ1mriutg/iDqsLa s8seyWLEImS1xeww5qJ8fyIT5oEvCJ61+lBk8DiRxXdK3CC16uY+9HtIhwOzM44A VrF2FhF9KhvMg4FCWQxsIHblQXX6Q6Ul0VyDusRAsakLtc84cD2AaVo2dxvbE1cy rMhyhzoVjS5fSLuJ48p4Nz/EtyC5uWArFFnfHZ70/K3JQGZkZuQH3Z1xS1hks/Bj 8SXx/Yp1TaGxVMDe4hyNNCYA9eGc1VRlGuAR782Q4stUK1TBMac0XMCTRQyZde// HQVjYiv2wVs7N01DKSxj9kjqa84kcGzHkf7MYiWFmoE52UTIm02lJYHH+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJz+xxmdY1ipv4K/od695BsY8UdaMB8GA1UdIwQY MBaAFNXoJWxPYh2MTBcGZeh46ojsuz9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWVnbGJFOWlIWXhNRndabDZIanFpT3k3UDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWYyYjQtZGQxMi00Yjk0LWJlM2It ZGNiM2Y4YWM3NTVlLzEvMWVnbGJFOWlIWXhNRndabDZIanFpT3k3UDFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9lYWYyYjQtZGQxMi00Yjk0LWJlM2ItZGNiM2Y4YWM3NTVl LzEvMWVnbGJFOWlIWXhNRndabDZIanFpT3k3UDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXQ2Zb0i 4z9tf3kkZImIBT4tggP7kD3BjleNBxLZ6Ri8Nb1dGpErQXiBGV6qerJ+jychG0Jd /WUKeP7eJlmWcqc0cMBig4Exz8ay57lzEV+Je5g1UL9zP0dwWs5Bnlft9ziHNX2R bB8SVOuff4+tLAFuUQI/xoFIV9W64Mk1FNEbqC4aLGujoSCxvKasN/7r2KySwdZq HWcWDEtsrwQ0rsRO9GY4gaa0naNkGCNaZcwZBWE/6fyURSWWCJk/thcsqWVmd0s9 klFzAd9x6gTeprVMuiV7QmuxXFhIG6ue5/ZBZ962Y0s/FEc1bKn/qfoGp1aZJ16g o67Ew0/v/bgNJQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:15:21 2025 by rpki-client